vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2020-29562

MEDIUM
4.8
CVSS Score
Published: December 4, 2020 at 06:48 AM UTC
Updated: October 14, 2026 at 10:17 AM UTC
4 products affected across 4 vendorsFedoraE Series Santricity OS ControllerGlibc

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM4.8
Exploit prediction
EPSS 2%
SSVC
No known exploit

Description

The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fedora· Fedora Projectrpm
95%
32
Glibc· Gnu
95%
2.30 ≤ v ≤ 2.32
E Series Santricity OS Controller· NetApp
95%
11.0.0 ≤ v ≤ 11.60.3
Glibc· Gnu C Library
32%
All versions

References (7)

Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVCUNLQ3HXGS4VPUQKWTJGRAW2KTFGXS/
Vendor Advisoryx_refsource_GENTOOThird Party Advisory
Source: [email protected]
https://security.gentoo.org/glsa/202101-20
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://security.netapp.com/advisory/ntap-20210122-0004/
x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
Source: [email protected]
https://sourceware.org/bugzilla/show_bug.cgi?id=26923
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
https://cert-portal.siemens.com/productcert/html/ssa-831302.html

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

4.8MEDIUMCISA-ADP
Attack Vector
NETWORK
Complexity
HIGH
Privileges
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-617

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card